Information Security Specialist

The Citadel•Charleston, SC

About The Position

The Citadel, The Military College of South Carolina, is seeking a candidate for an Information Security Analyst. This role requires a high degree of organizational awareness and savvy, emotional intelligence, tactfulness, and collaboration. The duties for this role will include the following: Implements and monitors information security controls and IT threat management activities. Assists with identifying, analyzing, and responding to security events, alerts, and incidents. Research security incidents and issues to help identify root causes or systemic risks. Carries out procedures to ensure systems, products, and services comply with approved security standards and policies. Review and evaluate program service delivery methods and systems including administrative and support systems and internal relationships; identify opportunities for improvement and implement changes to standard operating procedures to enhance services. Assists business units and operational teams with information security risk assessments. Supports the development of risk mitigation strategies and remediation plans. Helps analyze system vulnerabilities and contributes to recommendations for corrective actions. Works with customers and management to identify appropriate technical and procedural security controls. Assists in developing, deploying, and assessing security configurations and controls for on-premises infrastructure, cloud and hosted services, operating systems, applications, databases, networking, and telecommunications equipment. Supports security-related system implementations and enhancements. Maintains and supports the disaster recovery program for college systems, including backup strategies, recovery procedures, and testing activities. Assists with monitoring backup operations, validating data integrity, and supporting system restoration efforts to ensure availability and continuity of critical services.

Requirements

Bachelor’s degree in information technology, Computer Science, or a related field
Experience in the information technology field; including experience in a security-focused role.
Relevant experience may be substituted for the bachelor’s degree on a year-for-year basis.
Knowledge of system and network security concepts for common operating systems and local area network environments.
Familiarity with security tools and technologies used to deploy, manage, measure, and audit security controls.
Basic understanding of application, cloud, and hosted service security principles.
Ability to assist in developing detailed technical documentation.
Basic analytical, troubleshooting, and problem-solving skills.
Understanding of information risk concepts and how security controls support business needs.
Ability to communicate effectively with both technical and non-technical audiences.
Basic knowledge of project management principles.

Responsibilities

Implements and monitors information security controls and IT threat management activities.
Assists with identifying, analyzing, and responding to security events, alerts, and incidents.
Research security incidents and issues to help identify root causes or systemic risks.
Carries out procedures to ensure systems, products, and services comply with approved security standards and policies.
Review and evaluate program service delivery methods and systems including administrative and support systems and internal relationships; identify opportunities for improvement and implement changes to standard operating procedures to enhance services.
Assists business units and operational teams with information security risk assessments.
Supports the development of risk mitigation strategies and remediation plans.
Helps analyze system vulnerabilities and contributes to recommendations for corrective actions.
Works with customers and management to identify appropriate technical and procedural security controls.
Assists in developing, deploying, and assessing security configurations and controls for on-premises infrastructure, cloud and hosted services, operating systems, applications, databases, networking, and telecommunications equipment.
Supports security-related system implementations and enhancements.
Maintains and supports the disaster recovery program for college systems, including backup strategies, recovery procedures, and testing activities.
Assists with monitoring backup operations, validating data integrity, and supporting system restoration efforts to ensure availability and continuity of critical services.